Skip to content

Commit 7f188b8

Browse files
authored
Merge pull request #8489 from MicrosoftDocs/main
Publish main to live on 9/21 @ 10:30 am
2 parents 68184d0 + 14581d9 commit 7f188b8

10 files changed

Lines changed: 334 additions & 8 deletions

File tree

memdocs/configmgr/core/servers/deploy/configure/azure-services-wizard.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,8 @@ Configure the following Azure services using this wizard:
4545
- **Microsoft Store for Business**: Connect to the [Microsoft Store for Business](../../../../apps/deploy-use/manage-apps-from-the-windows-store-for-business.md). Get store apps for your organization that you can deploy with Configuration Manager.
4646

4747
- **Administration Service Management**: When configuring Azure Services, for enhanced security you can select Administration Service Management option. Selecting this option allows administrators to segment their admin privileges between [cloud management](../../../clients/manage/cmg/overview.md) and [administration service](../../../../develop/adminservice/overview.md). By enabling this option, access is restricted to only administration service endpoints. Configuration Management clients will authenticate to the site using Azure Active Directory. *(version 2207 or later)*
48+
> [!NOTE]
49+
> Only CMG VMSS customers can enable administrative service management option. This option is not applicable for classic CMG customers.
4850
4951
### Service details
5052

memdocs/intune/apps/manage-without-gms.md

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ keywords:
88
author: Erikre
99
ms.author: erikre
1010
manager: dougeby
11-
ms.date: 12/16/2021
11+
ms.date: 09/16/2022
1212
ms.topic: conceptual
1313
ms.service: microsoft-intune
1414
ms.subservice: apps
@@ -33,6 +33,9 @@ ms.collection: M365-identity-device-management
3333

3434
Microsoft Intune uses Google Mobile Services (GMS) to communicate with the Microsoft Intune company portal when managing Android devices. In some cases, devices may temporarily or permanently not have access to GMS. For example, a device might ship without GMS, or the device may be connecting to a closed network where GMS is not available. This document summarizes the differences and limitations you may observe when installing and using Intune to manage Android devices without GMS.
3535

36+
> [!NOTE]
37+
> These GMS related limitations also apply to Device Administrator management and Android (AOSP) Management.
38+
3639
## Install the Intune Company Portal app without access to the Google Play Store
3740

3841
### For users outside of People's Republic of China
@@ -43,7 +46,7 @@ If Google Play isn't available, Android devices can download the [Microsoft In
4346

4447
Because the Google Play Store is currently not available in People's Republic of China, Android devices must obtain apps from Chinese app marketplaces. For more information, see [Install the Company Portal app in People's Republic of China](../user-help/install-company-portal-android-china.md).
4548

46-
## Limitations of Intune device administrator management when GMS is unavailable
49+
## Limitations of Intune management when GMS is unavailable
4750

4851
### Unavailable Intune features
4952

@@ -76,6 +79,10 @@ The following tasks can require up to 8 hours to finish:
7679
- Device reset
7780
- Installation of available line-of-business apps
7881

82+
**Intune app for Android (AOSP)**:
83+
- Remote device removal
84+
- Device reset
85+
7986
**Intune Company Portal website**:
8087
- Device removal (local and remote)
8188
- Device reset

memdocs/intune/developer/app-wrapper-prepare-ios.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ You will need the following to distribute apps wrapped by Intune:
9696

9797
8. After agreeing to license, finish by **purchasing and activating the program**.
9898

99-
9. If you are the team agent (the person who joins the Apple Developer Enterprise Program on behalf of your organization), build your team first by inviting team members and assigning roles. To learn how to manage your team, read the Apple documentation on [Managing Your Developer Account Team](https://developer.apple.com/library/content/documentation/IDEs/Conceptual/AppDistributionGuide/ManagingYourTeam/ManagingYourTeam.html#//apple_ref/doc/uid/TP40012582-CH16-SW1).
99+
9. If you are the team agent (the person who joins the Apple Developer Enterprise Program on behalf of your organization), build your team first by inviting team members and assigning roles. To learn how to manage your team, read the Apple documentation on [Managing Your Developer Account Team](https://help.apple.com/developer-account/#/dev3e8818774).
100100

101101
### Steps to create an Apple signing certificate
102102

@@ -346,7 +346,7 @@ The App Wrapping Tool for iOS has some requirements that must be met in order to
346346
347347
## Setting app entitlements
348348
349-
Before wrapping your app, you can grant *[entitlements](https://developer.apple.com/library/content/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AboutEntitlements.html)* to give the app additional permissions and capabilities that exceed what an app can typically do. An *entitlement file* is used during code signing to specify special permissions within your app (for example, access to a shared keychain). Specific app services called *capabilities* are enabled within Xcode during app development. Once enabled, the capabilities are reflected in your entitlements file. For more information about entitlements and capabilities, see [Adding Capabilities](https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/AddingCapabilities/AddingCapabilities.html) in the iOS Developer Library. For a complete list of supported capabilities, see [Supported capabilities](https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/SupportedCapabilities/SupportedCapabilities.html).
349+
Before wrapping your app, you can grant *[entitlements](https://developer.apple.com/library/content/documentation/Miscellaneous/Reference/EntitlementKeyReference/Chapters/AboutEntitlements.html)* to give the app additional permissions and capabilities that exceed what an app can typically do. An *entitlement file* is used during code signing to specify special permissions within your app (for example, access to a shared keychain). Specific app services called *capabilities* are enabled within Xcode during app development. Once enabled, the capabilities are reflected in your entitlements file. For more information about entitlements and capabilities, see [Adding Capabilities](https://developer.apple.com/library/ios/documentation/IDEs/Conceptual/AppDistributionGuide/AddingCapabilities/AddingCapabilities.html) in the iOS Developer Library. For a complete list of supported capabilities, see [Supported capabilities](https://help.apple.com/developer-account/#/dev21218dfd6).
350350
351351
### Supported capabilities for the App Wrapping Tool for iOS
352352
Lines changed: 124 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,124 @@
1+
---
2+
# required metadata
3+
4+
title: Set up enrollment notifications in Intune
5+
titleSuffix: Microsoft Intune
6+
description: Set up enrollment notifications in Intune for employees or students.
7+
keywords:
8+
author: Lenewsad
9+
ms.author: lanewsad
10+
manager: dougeby
11+
ms.date: 09/20/2022
12+
ms.topic: how-to
13+
ms.service: microsoft-intune
14+
ms.subservice: enrollment
15+
ms.localizationpriority: high
16+
ms.technology:
17+
ms.assetid:
18+
19+
# optional metadata
20+
21+
#ROBOTS:
22+
#audience:
23+
24+
ms.reviewer: maholdaa
25+
ms.suite: ems
26+
search.appverid: MET150
27+
#ms.tgt_pltfrm:
28+
ms.custom: intune-azure
29+
ms.collection: M365-identity-device-management
30+
---
31+
32+
# Set up enrollment notifications
33+
34+
> [!IMPORTANT]
35+
> This feature is in public preview. For more information, see [Public preview in Microsoft Intune](../fundamentals/public-preview.md).
36+
37+
[!INCLUDE [azure_portal](../includes/azure_portal.md)]
38+
39+
Set up enrollment notifications in Microsoft Intune to notify employees of newly-enrolled devices. You can create a custom message for employees and include information in the notification about how to report an unrecognized device.
40+
41+
Intune delivers enrollment notifications via email or push notification. You can apply your tenant's branding and customization settings to email notifications.
42+
43+
Enrollment notifications work on devices running:
44+
45+
* Android
46+
* iOS/iPadOS
47+
* macOS
48+
* Windows 10/11
49+
50+
This article describes how to create enrollment notifications in the Microsoft Endpoint Manager admin center.
51+
52+
## Example
53+
The following example image shows what the enrollment notification looks like to the device user.
54+
55+
> [!div class="mx-imgBorder"]
56+
> ![Example image of an enrollment notification configured in Intune, notifying the recipient that a device named *Nia's iPhone" was enrolled, and includes HTML elements such as bolded font and a hyperlink, device details, contact information, and privacy statement.](./media/enrollment-notifications/enrollment-notification-message.png)
57+
58+
## Prerequisites
59+
To create an enrollment notification, you must:
60+
61+
* Be a Global Administrator or Intune Administrator.
62+
* [Configure branding and customization settings](../apps/company-portal-app.md) in **Tenant administration** > **Customization**.
63+
64+
Enrollment notifications only work with user-driven enrollment methods.
65+
66+
## You should know
67+
Email notifications appear in the user's inbox. Push notifications appear in the Intune Company Portal apps for iOS/iPadOS, macOS, and Android. Enrollment push notifications aren't supported in the Company Portal for Windows, so they'll never appear there.
68+
69+
## Create an enrollment notification
70+
71+
> [!TIP]
72+
> Use the built-in HTML editor to format and style email notifications. Intune supports the following HTML tags: `<a>`, `<strong>`, `<b>`, `<u>`, `<ol>`, `<ul>`, `<li>`, `<p>`, `<br>`, `<code>`, `<table>`, `<tbody>`, `<tr>`, `<td>`, `<thead>`, and`<th>`. It also supports the `href` attribute for hyperlinks.
73+
74+
1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431).
75+
2. Go to **Devices** > **Enroll device** and select the platform you're creating notifications for. Your options:
76+
* **Windows enrollment**
77+
* **Apple enrollment**
78+
* **Android enrollment**
79+
3. Select **Enrollment notifications (preview)**.
80+
4. Select **Create notification**. For Apple and Android notifications, select the OS platform you're configuring the notifications for.
81+
82+
Your options for Apple enrollment are:
83+
* **iOS Notifications**
84+
* **macOS Notifications**
85+
86+
Your options for Android enrollment are:
87+
* **Android Enterprise Notifications**
88+
* **Android device administrator Notifications**
89+
5. In **Basics**, configure the following settings:
90+
* **Name**: Enter a descriptive name for the notification. Name your notifications so you can easily identify them later.
91+
* **Description**: Enter a description for the notification. This setting is optional, but recommended.
92+
6. Select **Next**.
93+
7. In **Notification settings**, configure the notification messages.
94+
95+
The options for push notifications are:
96+
* **Send Push Notification**: Flip the switch **On** to enable and create a push notification.
97+
* **Subject**: Enter the subject of the enrollment notification.
98+
* **Message**: Enter your message, explaining the purpose of the notification. The character limit is 2000.
99+
100+
The options for email notifications are:
101+
* **Send Email Notification**: Flip the switch **On** to enable and create an email notification.
102+
* **Subject**: Enter the subject of the enrollment notification.
103+
* **Message**: Enter your message. The character limit is 2000.
104+
* **Raw HTML editor**: Flip the switch **On** to enable HTML formatting.
105+
106+
The options for branding and customization are:
107+
108+
* **Show company logo**: Flip the switch **On** to make your organization's logo visible in the email header. This option becomes available after you've configured Company Portal branding in your tenant.
109+
* **Show device details**: Flip the switch **On** to make the following device details visible in the footer of the email:
110+
* Device name
111+
* Model
112+
* OS
113+
* OS version
114+
* Serial number
115+
* **Show company name**: Flip the switch **On** to make your organization's name visible in the footer of the email. The tenant value is automatically populated.
116+
* **Show contact information**: Flip the switch **On** to show your organization's contact information. The tenant value is automatically populated.
117+
* **Show Company portal website link**: Flip the switch **On** to show a link to the Company Portal website. The tenant value is automatically populated.
118+
8. Select **Next**.
119+
9. Optionally, assign a scope tag, like `US-NC IT Team` or `JohnGlenn_ITDepartment`, to limit management of the notification to specific IT groups. Then select **Next**.
120+
10. In **Assignments**, select the users or groups that will receive your profile. You can also apply assignment filters, which are available for Windows and Apple devices.
121+
11. Select **Next**.
122+
12. In **Review + create**, review the notification details, and then select **Create**.
123+
124+
Enrollment notifications are sent out to assigned groups when enrollment is triggered. Return to **Enrollment notifications (preview)** to view and edit notifications, or change priority level.
114 KB
Loading

memdocs/intune/enrollment/toc.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,8 @@ items:
4646
- name: Require multi-factor authentication
4747
href: multi-factor-authentication.md
4848
displayName: mfa; multifactor
49+
- name: Set up enrollment notifications
50+
href: enrollment-notifications.md
4951
- name: Set up Windows enrollment
5052
items:
5153
- name: Windows enrollment methods

memdocs/intune/fundamentals/china.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ Because the China services are operated by a partner from inside China, there ar
5252
- Google Play Protect capabilities such as SafetyNet device attestation.
5353
- Managing apps from the Google Play Store.
5454
- Android Enterprise capabilities. For more information, see this [Google documentation](https://support.google.com/work/android/answer/6270910?hl=en).
55-
- The Intune Company Portal app for Android uses Google Mobile Services to communicate with the Microsoft Intune service. Because Google Play services isn't available in China, some tasks can require up to 8 hours to finish. For more information, see this [article](../apps/manage-without-gms.md#limitations-of-intune-device-administrator-management-when-gms-is-unavailable).
55+
- The Intune Company Portal app for Android uses Google Mobile Services to communicate with the Microsoft Intune service. Because Google Play services isn't available in China, some tasks can require up to 8 hours to finish. For more information, see this [article](../apps/manage-without-gms.md#limitations-of-intune-management-when-gms-is-unavailable).
5656
- To follow local regulations and provide improved functionality, the Intune client experience (Company Portal app) may differ in China.
5757
- Fencing isn't available.
5858
- Mobile Application Management (MAM) availability is conditional on those apps being available in People's Republic of China.

memdocs/intune/fundamentals/intune-endpoints.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ Depending on how you choose to manage Android devices, you may need to open the
119119

120120
> [!NOTE]
121121
> Because Google Mobile Services isn't available in China, devices in China managed by Intune can't use features that require Google Mobile Services. These features include: Google Play Protect capabilities such as SafetyNet device attestation, Managing apps from the Google Play Store,
122-
Android Enterprise capabilities (see this [Google documentation](https://support.google.com/work/android/answer/6270910)). Additionally, the Intune Company Portal app for Android uses Google Mobile Services to communicate with the Microsoft Intune service. Because Google Play services isn't available in China, some tasks can require up to 8 hours to finish. For more information, see this [article](../apps/manage-without-gms.md#limitations-of-intune-device-administrator-management-when-gms-is-unavailable).
122+
Android Enterprise capabilities (see this [Google documentation](https://support.google.com/work/android/answer/6270910)). Additionally, the Intune Company Portal app for Android uses Google Mobile Services to communicate with the Microsoft Intune service. Because Google Play services isn't available in China, some tasks can require up to 8 hours to finish. For more information, see this [article](../apps/manage-without-gms.md#limitations-of-intune-management-when-gms-is-unavailable).
123123

124124
### Android (AOSP)
125125

0 commit comments

Comments
 (0)